/interface bridge
add name=bridge1 protocol-mode=none
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
/interface ethernet switch vlan
add independent-learning=yes ports=ether2,ether3 switch=switch1 vlan-id=200
add independent-learning=yes ports=ether2,ether4 switch=switch1 vlan-id=300
add independent-learning=yes ports=ether2,ether5 switch=switch1 vlan-id=400
/ip address
add address=192.168.100.1/24 network=192.168.100.0
add address=192.168.101.1/24 network=192.168.101.0
add address=192.168.102.1/24 network=192.168.102.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 protocol=tcp src-address=192.168.100.0/24
add action=masquerade chain=srcnat out-interface=ether1 protocol=tcp src-address=192.168.101.0/24
add action=masquerade chain=srcnat out-interface=ether1 protocol=tcp src-address=192.168.102.0/24
/system routerboard settings
set silent-boot=no
/interface bridge
add admin-mac= auto-mac=no name=bridge protocol-mode=none
/interface ethernet
set [ find default-name=ether1 ] name=ether1.HUG
set [ find default-name=ether2 ] name=ether2.CRS112
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1.HUG max-mru=1492 max-mtu=1492 name=Movistar use-peer-dns=yes user=adslppp@telefonicanetpa
/interface vlan
add interface=ether2.CRS112 name=vlan10_PC vlan-id=10
add interface=ether2.CRS112 name=vlan12_WiFi vlan-id=12
add interface=ether2.CRS112 name=vlan14_TV vlan-id=14
add interface=ether2.CRS112 name=vlan15_MGMT vlan-id=15
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge interface=ether2.CRS112
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
/interface ethernet switch vlan
add independent-learning=no ports=ether5,switch1-cpu switch=switch1 vlan-id=10
add independent-learning=no ports=ether5,switch1-cpu switch=switch1 vlan-id=12
add independent-learning=no ports=ether5,switch1-cpu switch=switch1 vlan-id=15
add independent-learning=no ports=ether5,switch1-cpu switch=switch1 vlan-id=14
/interface list member
add interface=bridge list=LAN
add interface=ether1.HUG list=WAN
/interface bridge
add admin-mac= auto-mac=no name=bridge
/interface ethernet
set [ find default-name=ether3 ] name=ether3.GabrielPC
set [ find default-name=ether4 ] name=ether4.TV
set [ find default-name=ether5 ] name=ether5.CRS112
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MOVISTAR_62DF \
vlan-id=12 vlan-mode=use-tag wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MOVISTAR_62DF \
vlan-id=12 vlan-mode=use-tag wireless-protocol=802.11
/interface vlan
add interface=ether5.CRS112 name=vlan15 vlan-id=15
/interface ethernet switch port
set 0 default-vlan-id=1 vlan-header=always-strip vlan-mode=secure
set 1 default-vlan-id=1 vlan-header=always-strip vlan-mode=secure
set 2 default-vlan-id=10 vlan-header=always-strip vlan-mode=secure
set 3 default-vlan-id=14 vlan-header=always-strip vlan-mode=secure
set 4 default-vlan-id=1 vlan-mode=fallback
set 5 vlan-mode=fallback
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge interface=ether2
add bridge=bridge interface=ether3.GabrielPC
add bridge=bridge interface=ether4.TV
add bridge=bridge interface=ether5.CRS112
add bridge=bridge interface=sfp1
add bridge=bridge interface=wlan1
add bridge=bridge interface=wlan2
/interface ethernet switch vlan
add independent-learning=no ports=ether5.CRS112,switch1-cpu switch=switch1 vlan-id=15
add independent-learning=no ports=ether4.TV,ether5.CRS112 switch=switch1 vlan-id=14
add independent-learning=no ports=ether3.GabrielPC,ether5.CRS112 switch=switch1 vlan-id=10
add independent-learning=no ports=ether5.CRS112 switch=switch1 vlan-id=20
/interface list member
add interface=bridge list=LAN
add interface=ether1 list=WAN
Hello,
I want on the vlan 200, 300, 400 individual IP ranges with dhcp-server on it.
vlan-200 = 192.168.100.0/24
vlan-300 = 192.168.101.0/24
vlan-400 = 192.168.102.0/24
How do I configure that with the hw-offload?
Router 3011 = router with the 3 different IP ranges
Trunk ether2 as in this example goes to RB 260GS (SwOS
I think with this example like Mikrotik examples that this is not possible
But I can be wrong
Greatings and thanks for your reply
The link currently returns 404 and I cannot see a post with that title in the Mikrotik section. Work in progress?See on my website to the result.
https://www.wirelessinfo.be/port-based- ... otik-swos/
I'm afraid it is just a misunderstanding. The "use service tag" option actually means "apply VLAN tags with ethertype value of 0x88A8 instead of the 'normal' ethertype value of 0x8100" and is used at places where the context implies that the frames are always tagged. Where both tagless and tagged packets are plausible, there is a choice between "no tag, use tag, use service tag".if i set "use service tag" on the RB3011 it don't work anymore.
Strange, because the trunk should normally support vlan-tagging
Thanks anav for the positive reply.Nice site plisken! Luckily I have learned how to google translate the pages.
Thinks there are some information missing here.
If you need inter-vlan routing (i.e. layer 3 feature) on bridge:
bridge must disable VLAN filtering
create VLAN interfaces on bridge interface
then use these VLAN interfaces to config layer 3 features (IP, routing, etc.)
this will NOT be hw-offloaded
If you need only L2 VLAN on bridge:
config VLANs on bridge menu (not VLAN interfaces), set current tagged port to be all of your trunk port on every VLAN entry
config per port VLAN on bridge menu (if you need access port)
enable VLAN filtering on your bridge interface
this MAY be hw-offloaded (hw feature differs)
The above is not fully accurate - the sentence highlighted in red in particular is wrong, vlan-filtering does not interfere with inter-vlan routing. The rest is true - to route packets between VLANs, you have to deliver them to the CPU which performs the routing, so this functionality cannot be hardware offloaded. But that does not mean that forwarding frames within each VLAN between physical interfaces cannot be hardware offloaded.If you need inter-vlan routing (i.e. layer 3 feature) on bridge:
bridge must disable VLAN filtering
create VLAN interfaces on bridge interface
then use these VLAN interfaces to config layer 3 features (IP, routing, etc.)
this will NOT be hw-offloaded
But in most MikroTik router models, you cannot have hardware accellerated switching between ports when you have migrated to the new "bridge with VLAN support" introduced in 6.41!The above is not fully accurate - the sentence highlighted in red in particular is wrong, vlan-filtering does not interfere with inter-vlan routing. The rest is true - to route packets between VLANs, you have to deliver them to the CPU which performs the routing, so this functionality cannot be hardware offloaded. But that does not mean that forwarding frames within each VLAN between physical interfaces cannot be hardware offloaded.